Dropped Files | ZeroBOX

Name	b1c7a4cec85fdd37_g5bip5vpdjqljo0ufbzjai9d.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\G5BIp5VpDjqlJO0uFbZjAI9d.exe
Size	4.3KB
Processes	2648 (china.png)
Type	HTML document, ASCII text
MD5	`6aeaac6027e7f6322aa373611048cda4`
SHA1	`8227aa6bac34460255705a9d5023bab5accdfc46`
SHA256	`b1c7a4cec85fdd3795c9158e14cf9c26236f1097643f2c4663dfd044faa25ace`
CRC32	`F6FED424`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsKsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmKsgsfGD`
Yara	None matched
VirusTotal	Search for analysis

Name	f9349585a2393d43_awy8jnss3c7vfnurv0ihunyq.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\Awy8JNSs3C7VfnURv0IhUNyq.exe
Size	494.0KB
Processes	2648 (china.png)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`28345a7bb63babaf99e760965ce493b7`
SHA1	`7e752390f6ebca4e1e8889302549be4dd0845f62`
SHA256	`f9349585a2393d4378e283e73fc48d04941666ec0ccae4dd2fb68c2cad7ac9a1`
CRC32	`1DB82DEF`
ssdeep	`12288:qpHLo/ADRUoBhT3d7ybbicrZumiAgp+zjgm6sFuMLGx:SroGRU+Fu+clhl/JVuMSx`
Yara	win_registry - Affect system registries win_files_operation - Affect private profile PE_Header_Zero - PE File Signature Zero OS_Processor_Check_Zero - OS Processor Check Signature Zero IsPE32 - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check
VirusTotal	Search for analysis

Name	e1b98d3aafed90eb_ibit4f2x8i7lncplemfhy5jw.exe Submit file
Filepath	C:\Users\test22\AppData\Roaming\ibIt4F2x8I7lNCplEMfhY5jw.exe
Size	4.3KB
Processes	2648 (china.png)
Type	HTML document, ASCII text
MD5	`8dea5aadfab43a55a8ba92b05018b97b`
SHA1	`8410f346b3843a3f97c1cc4018ece7094e595835`
SHA256	`e1b98d3aafed90eb2cce2500be0b18d0c1d4a753de7d6143d5524f5d9835845c`
CRC32	`492736F9`
ssdeep	`96:1j9jwIjYjyDK/DZD8jH+k1CZBvJADh/pRsvsgszbGD:1j9jhjYjWK/lyH+kMBRADh/pmvsgsfGD`
Yara	None matched
VirusTotal	Search for analysis